Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/pfebnJD69NHh8V13L87BcdREodY.roa
File: pfebnJD69NHh8V13L87BcdREodY.roa (raw, json)
Hash identifier: xuwqL4qXWTlQ+P1WrUD4/DPyxGZjntCa7ekvIFhiF6o=
Subject key identifier: A5:F7:9B:9C:90:FA:F4:D1:E1:F1:5D:77:2F:CE:C1:71:D4:44:A1:D6
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0197CB69421A42D5E056A81D7622752117A0
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/pfebnJD69NHh8V13L87BcdREodY.roa
Signing time: Wed 02 Jul 2025 13:52:42 +0000
ROA not before: Wed 02 Jul 2025 13:52:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.116.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:69:42:1a:42:d5:e0:56:a8:1d:76:22:75:21:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jul 2 13:52:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5f79b9c90faf4d1e1f15d772fcec171d444a1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:dc:a4:17:12:26:89:de:b4:dd:4d:aa:dc:
8f:f5:a6:71:b4:2f:06:66:32:8a:d3:27:0d:7a:2c:
d9:fe:d2:98:f1:13:4a:57:ed:c2:af:6d:56:69:1b:
a9:25:70:de:53:2a:e0:29:b2:43:3e:46:ab:05:da:
9b:57:32:7d:ce:5a:e3:c8:08:52:60:1e:5e:23:aa:
c5:c4:54:06:f3:b3:0e:c6:d4:32:8a:07:be:46:8b:
79:1e:96:df:08:bf:e6:eb:e8:c5:3e:8e:4f:6b:ea:
e5:97:f0:32:23:d1:ba:b0:4d:b1:2f:7e:48:74:2c:
7f:c9:81:98:a5:31:28:31:8b:c8:ec:c4:0f:6b:c5:
3e:9c:fe:c2:e3:14:60:82:51:12:ad:98:46:2a:b9:
23:9e:2b:5c:c1:94:c3:e9:bd:0c:ab:16:f1:20:4d:
bf:a7:f8:ea:08:4b:f7:33:07:c3:2b:b1:07:0a:39:
23:a2:d4:ce:84:f5:a0:19:68:94:99:aa:5d:23:60:
7d:0a:ef:79:cb:89:73:b1:f2:05:b9:b8:5e:2e:5e:
a7:20:64:5e:72:72:93:25:0c:95:c7:f5:3a:5d:a9:
d6:ea:6f:50:21:8f:3c:ef:5a:6b:28:75:70:5a:30:
b8:2f:a4:48:b0:3e:a1:67:58:62:d4:2c:af:f4:10:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F7:9B:9C:90:FA:F4:D1:E1:F1:5D:77:2F:CE:C1:71:D4:44:A1:D6
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/pfebnJD69NHh8V13L87BcdREodY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.235.0/24
Signature Algorithm: sha256WithRSAEncryption
57:3e:6a:3c:52:42:c3:5f:d3:8c:9a:db:5e:10:38:71:ad:b7:
74:0c:a5:73:09:65:1b:70:a5:18:75:2e:02:13:87:94:d1:fa:
1b:f6:3c:84:ba:5b:95:e2:c7:4c:d3:88:7a:ef:f2:cc:b3:0d:
73:64:28:45:24:35:5f:03:ff:69:cd:ec:bf:54:38:e9:db:50:
5e:e5:4a:aa:6e:06:ef:78:40:d0:1e:46:43:cc:5d:28:e3:e8:
cd:cb:c5:8a:07:3c:66:d6:30:b3:05:29:6c:5a:0f:d6:d5:94:
51:51:43:9a:95:18:b8:5f:3a:e7:9b:50:b6:bf:48:fd:cc:a4:
40:bb:f3:b5:a6:7e:65:7c:97:11:72:a0:d2:c7:8f:a1:e5:da:
78:ff:7b:f3:f3:0c:c0:99:25:a9:60:9c:33:b3:7d:31:e5:8d:
95:b5:ac:37:b4:3b:b1:b0:34:a7:08:7a:00:9d:05:ee:4a:17:
7b:a4:e9:ed:9c:d7:00:90:cb:e7:73:97:2d:3e:63:0f:ad:f1:
3b:22:38:30:07:18:1f:96:f8:cd:ec:7b:71:95:19:45:b4:e3:
a5:1e:7d:54:6a:26:44:e1:27:67:8d:2e:a2:b1:06:30:5c:e1:
6a:4c:52:ec:a2:fb:9a:f2:95:05:0c:a0:c2:7c:95:0a:45:7e:
1f:e5:f8:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfLaUIaQtXgVqgddiJ1IRegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjUwNzAyMTM1MjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWY3OWI5YzkwZmFmNGQxZTFmMTVkNzcyZmNlYzE3MWQ0NDRhMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAHcpBcSJonetN1NqtyP9aZxtC8G
ZjKK0ycNeizZ/tKY8RNKV+3Cr21WaRupJXDeUyrgKbJDPkarBdqbVzJ9zlrjyAhS
YB5eI6rFxFQG87MOxtQyige+Rot5HpbfCL/m6+jFPo5Pa+rll/AyI9G6sE2xL35I
dCx/yYGYpTEoMYvI7MQPa8U+nP7C4xRgglESrZhGKrkjnitcwZTD6b0MqxbxIE2/
p/jqCEv3MwfDK7EHCjkjotTOhPWgGWiUmapdI2B9Cu95y4lzsfIFubheLl6nIGRe
cnKTJQyVx/U6XanW6m9QIY8871prKHVwWjC4L6RIsD6hZ1hi1Cyv9BBC7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKX3m5yQ+vTR4fFddy/OwXHURKHWMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvcGZlYm5KRDY5TkhoOFYxM0w4N0JjZFJFb2RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnTrMA0G
CSqGSIb3DQEBCwUAA4IBAQBXPmo8UkLDX9OMmtteEDhxrbd0DKVzCWUbcKUYdS4C
E4eU0fob9jyEuluV4sdM04h67/LMsw1zZChFJDVfA/9pzey/VDjp21Be5Uqqbgbv
eEDQHkZDzF0o4+jNy8WKBzxm1jCzBSlsWg/W1ZRRUUOalRi4Xzrnm1C2v0j9zKRA
u/O1pn5lfJcRcqDSx4+h5dp4/3vz8wzAmSWpYJwzs30x5Y2Vtaw3tDuxsDSnCHoA
nQXuShd7pOntnNcAkMvnc5ctPmMPrfE7IjgwBxgflvjN7HtxlRlFtOOlHn1UaiZE
4SdnjS6isQYwXOFqTFLsovua8pUFDKDCfJUKRX4f5fjC
-----END CERTIFICATE-----
Generated at Sat Jul 5 20:31:49 2025 by rpki-client